About the company
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer - Identity and Access Management based in Canada.
Responsibilities
- Develop and implement robust IAM strategies aligned with cloud-native security principles, zero-trust architecture, and least-privilege access.
- Build and mature capabilities across Identity Governance and Administration (IGA), Privileged Access Management (PAM), SSO, MFA, access management, secrets management, and certificate lifecycle management.
- Design and maintain IAM integrations across AWS services, SaaS platforms, third-party identity solutions, and developer or DevOps environments.
- Automate identity provisioning, de-provisioning, access reviews, and related IAM operations.
- Establish secure access controls for cloud-native workloads and AI/ML systems.
- Integrate IAM controls into CI/CD pipelines, secrets management processes, and broader engineering workflows.
- Partner with Security, DevOps, Infrastructure, and other cross-functional teams.
- Mentor junior engineers and provide technical leadership on IAM initiatives.
- Monitor emerging identity and cloud security threats, compliance requirements, and industry practices.
Requirements
- 8+ years of relevant professional experience with a Bachelor's degree, 5+ years with a Master's degree, 3+ years with a PhD, or an equivalent combination of education and experience.
- Strong hands-on experience with IAM platforms such as Okta, CyberArk, Ping, or SailPoint.
- Deep knowledge of IAM in cloud-native environments, particularly AWS IAM, roles, policies, permissions boundaries, federation, and access controls.
- Strong proficiency with infrastructure-as-code technologies such as Terraform or CloudFormation.
- Practical knowledge of authentication and authorization protocols including SAML, OAuth 2.0, OpenID Connect, and Kerberos.
- Experience with directory services such as Active Directory and LDAP.
- Strong scripting and automation capabilities using technologies such as Python or PowerShell.
- Experience integrating IAM into CI/CD pipelines, DevOps workflows, secrets management, and cloud environments.
- Solid understanding of security and compliance frameworks such as NIST, SOC 2, and PCI DSS.
- Strong communication, collaboration, and influencing skills.
- Ability to mentor others, work independently, make sound technical decisions.
- Relevant certifications such as CISSP, CISM, CIAM/CAMS, CyberArk, or Okta credentials are considered an asset.
- Experience with AWS services such as Lambda, S3, DynamoDB, RDS, Aurora, SNS, SQS, CloudTrail, CloudWatch, CodePipeline is a plus.
Conditions
- Competitive base salary of CAD $136,800–$171,000.
- Annual bonus opportunities.
- Multiple health insurance options.
- Flexible vacation time plus additional floating holidays.
- Retirement savings program with company contributions.
- Equity participation in a publicly traded organization.
- Monthly stipend to support remote work.
- Annual professional development stipend.
- Family-forming benefits and generous parental leave.
- Flexible-first remote work environment available across Canada, with this role specifically supporting employees in Ontario or British Columbia.